Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a313030303a3a2f33362d3336203d3e20323633353834.roa
File:                     323830343a6636383a313030303a3a2f33362d3336203d3e20323633353834.roa (raw, json)
Hash identifier:          /ZEGnLotSS96zAPH0hWGdSxS09G7pQdwydtmkhfeiWc=
Subject key identifier:   EB:EB:64:72:11:B9:2B:72:9C:D8:2F:B2:2D:58:1C:DF:08:1F:B9:2F
Certificate issuer:       /CN=4B3A30BAE843BAF4B139185B582BA682798E126F
Certificate serial:       3368F46C5E32A74684FD1E73CC6E9CD1B0C1F73D
Authority key identifier: 4B:3A:30:BA:E8:43:BA:F4:B1:39:18:5B:58:2B:A6:82:79:8E:12:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3A30BAE843BAF4B139185B582BA682798E126F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a313030303a3a2f33362d3336203d3e20323633353834.roa
Signing time:             Sat 14 Mar 2026 22:28:24 +0000
ROA not before:           Sat 14 Mar 2026 22:23:24 +0000
ROA not after:            Sat 13 Mar 2027 22:28:24 +0000
asID:                     263584
IP address blocks:        2804:f68:1000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:68:f4:6c:5e:32:a7:46:84:fd:1e:73:cc:6e:9c:d1:b0:c1:f7:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3A30BAE843BAF4B139185B582BA682798E126F
        Validity
            Not Before: Mar 14 22:23:24 2026 GMT
            Not After : Mar 13 22:28:24 2027 GMT
        Subject: CN=EBEB647211B92B729CD82FB22D581CDF081FB92F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:97:70:76:66:4b:32:d4:7e:34:9d:b3:46:
                    17:09:1d:65:05:c9:6e:79:b0:89:9b:12:81:00:9e:
                    0e:60:60:da:18:a2:93:b0:a9:18:91:1e:6f:54:8c:
                    b2:e7:7b:06:45:09:bd:95:e6:00:05:f2:c5:df:d8:
                    9f:b3:50:cb:1d:45:89:9a:17:00:96:71:ad:52:6f:
                    08:1d:5c:58:bd:77:46:67:2e:1c:84:80:e5:74:54:
                    11:f5:b6:d6:3e:84:f5:e1:51:77:c3:ee:84:d0:c8:
                    2c:6e:15:c6:29:d5:9e:3c:8f:a3:a6:75:ec:da:6a:
                    cd:e2:b5:a1:0f:9e:a0:3d:87:e7:7a:4b:53:39:81:
                    7e:dc:5a:22:b9:c2:2c:95:2d:06:6a:1e:6c:4a:eb:
                    c9:3c:ff:93:ee:70:7f:a8:4c:d3:88:85:91:65:57:
                    72:16:ee:e9:7d:d4:3c:c5:78:a5:3d:0b:35:39:4d:
                    09:cd:bb:06:63:f8:2e:20:b3:29:96:21:05:4a:20:
                    6d:03:41:79:df:a5:72:a2:4d:de:6d:92:66:09:ab:
                    f4:3f:af:b2:05:c6:66:00:b4:d6:64:5b:40:2b:8f:
                    29:f6:e9:31:be:ca:3d:96:08:11:08:ce:49:46:79:
                    4e:a4:83:d6:90:1a:e6:67:d8:aa:e4:38:bb:5a:05:
                    da:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EB:64:72:11:B9:2B:72:9C:D8:2F:B2:2D:58:1C:DF:08:1F:B9:2F
            X509v3 Authority Key Identifier:
                keyid:4B:3A:30:BA:E8:43:BA:F4:B1:39:18:5B:58:2B:A6:82:79:8E:12:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/4B3A30BAE843BAF4B139185B582BA682798E126F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3A30BAE843BAF4B139185B582BA682798E126F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a313030303a3a2f33362d3336203d3e20323633353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f68:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         75:1a:36:30:42:8c:13:cf:e1:8e:5e:81:50:89:c3:87:32:e6:
         85:ac:f6:14:c6:39:b0:88:18:3c:67:ed:c0:e0:e7:46:6b:3d:
         96:cc:c9:10:80:e8:f1:cb:5f:60:c3:b2:85:ba:f3:44:1a:e3:
         3a:47:38:01:7e:84:0f:11:a5:76:90:3e:a5:22:c3:c7:77:7e:
         65:e1:e8:af:6e:21:68:fd:fa:00:e8:65:da:04:57:29:2a:36:
         8f:0d:50:2c:98:c4:b8:38:9f:4f:68:47:3b:b7:5f:61:db:bb:
         5d:fc:6e:46:88:2b:d9:31:ed:fd:63:ae:bc:69:d5:e8:9a:cd:
         7e:24:ab:70:64:2f:33:99:a9:ac:e3:48:03:ae:29:c0:04:41:
         bf:f3:a9:7b:d3:c2:60:f2:09:29:4c:b1:08:61:f8:b9:55:c5:
         2f:be:7a:13:7c:7b:0a:e2:5c:f2:09:d5:ec:26:c4:65:f8:50:
         46:8c:c5:83:77:df:2b:97:49:1c:10:ff:af:ca:61:30:e5:62:
         6e:77:d5:67:a4:30:a7:58:67:3f:8f:2a:52:cf:4c:94:a0:5e:
         f1:9d:c1:cf:1a:66:85:94:40:88:79:eb:69:62:0e:3d:4f:0e:
         0e:84:c3:d5:00:f0:85:42:f9:e0:e3:2e:b7:c8:54:f2:60:9d:
         32:7d:4b:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUM2j0bF4yp0aE/R5zzG6c0bDB9z0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEIzQTMwQkFFODQzQkFGNEIxMzkxODVCNTgyQkE2ODI3
OThFMTI2RjAeFw0yNjAzMTQyMjIzMjRaFw0yNzAzMTMyMjI4MjRaMDMxMTAvBgNV
BAMTKEVCRUI2NDcyMTFCOTJCNzI5Q0Q4MkZCMjJENTgxQ0RGMDgxRkI5MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsi5dwdmZLMtR+NJ2zRhcJHWUF
yW55sImbEoEAng5gYNoYopOwqRiRHm9UjLLnewZFCb2V5gAF8sXf2J+zUMsdRYma
FwCWca1SbwgdXFi9d0ZnLhyEgOV0VBH1ttY+hPXhUXfD7oTQyCxuFcYp1Z48j6Om
dezaas3itaEPnqA9h+d6S1M5gX7cWiK5wiyVLQZqHmxK68k8/5PucH+oTNOIhZFl
V3IW7ul91DzFeKU9CzU5TQnNuwZj+C4gsymWIQVKIG0DQXnfpXKiTd5tkmYJq/Q/
r7IFxmYAtNZkW0Arjyn26TG+yj2WCBEIzklGeU6kg9aQGuZn2KrkOLtaBdrNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU6+tkchG5K3Kc2C+yLVgc3wgfuS8wHwYDVR0j
BBgwFoAUSzowuuhDuvSxORhbWCumgnmOEm8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0tpMnpZUHZWQ3ZVcGFLOFRSSFZhODhZa2RLUWk3d0J6S2d3am15TDRS
Q3EvMC80QjNBMzBCQUU4NDNCQUY0QjEzOTE4NUI1ODJCQTY4Mjc5OEUxMjZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCM0EzMEJBRTg0M0JBRjRC
MTM5MTg1QjU4MkJBNjgyNzk4RTEyNkYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dLaTJ6WVB2VkN2VXBhSzhUUkhWYTg4WWtkS1FpN3dCektnd2pteUw0UkNxLzAv
MzIzODMwMzQzYTY2MzYzODNhMzEzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzMjM2MzMzNTM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBA9oEDANBgkqhkiG9w0BAQsFAAOC
AQEAdRo2MEKME8/hjl6BUInDhzLmhaz2FMY5sIgYPGftwODnRms9lszJEIDo8ctf
YMOyhbrzRBrjOkc4AX6EDxGldpA+pSLDx3d+ZeHor24haP36AOhl2gRXKSo2jw1Q
LJjEuDifT2hHO7dfYdu7XfxuRogr2THt/WOuvGnV6JrNfiSrcGQvM5mprONIA64p
wARBv/Ope9PCYPIJKUyxCGH4uVXFL756E3x7CuJc8gnV7CbEZfhQRozFg3ffK5dJ
HBD/r8phMOVibnfVZ6Qwp1hnP48qUs9MlKBe8Z3BzxpmhZRAiHnraWIOPU8ODoTD
1QDwhUL54OMut8hU8mCdMn1LtQ==
-----END CERTIFICATE-----
Generated at Wed Apr 8 10:42:03 2026 by rpki-client